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ABSTRACT 

Given a prior probability distribution over a set of possible oracle functions, we define 
a number of queries to be useless for determining some property of the function if the 
probability that the function has the property is unchanged after the oracle responds 
to the queries. A familiar example is the parity of a uniformly random Boolean-valued 
function over {1,2, ...,A^}, for which — 1 classical queries are useless. We prove that if 
2k classical queries are useless for some oracle problem, then k quantum queries are also 
useless. For such problems, which include classical threshold secret sharing schemes, our 
result also gives a new way to obtain a lower bound on the quantum query complexity, 
even in cases where neither the function nor the property to be determined is Boolean. 

2010 Physics and Astronomy Classification Scheme: 03. 67. Ac. 

2010 American Mathematical Society Subject Classification: 68Q12, 68Q17, 81P68. 

Key Words: computational learning theory, oracle problem, query complexity, lower bound. 



1 



On the uselessness of quantum queries 



Meyer & Pommersheim 



1. Introduction 

Many computational problems involve queries to an oracle (calls to a subroutine) that 
evaluates some function / at the argument x passed to it and returns the result f{x). 
Typically, the task is to use the oracle to determine some property of the unknown function. 
An important example for quantum computation is PERIOD FINDING [1,2] (the AbeliAN 
Hidden Subgroup Problem [3,4]), where the function is invariant under addition of 
some constant to its argument and the task is to find that constant. Another example 
is Concept Learning, where there is some set (the concept class) of Boolean-valued 
functions and the task is to identify exactly which one (the concept) the oracle is evaluating 
[5]. Grover's UNSTRUCTURED SEARCH problem [6] is an instance of concept learning, 
where the possible functions each take the value 1 for exactly one argument and the value 
for all other arguments. 

A natural goal is to minimize the number of queries to the oracle needed to solve the 
problem; this minimum is the query complexity of the problem. An alternative goal is 
to maximize the probability of determining the desired property of / using no more than 
some fixed number of queries, k. Although this probability is clearly non-decreasing in k, 
when it does not increase with additional queries, we might say that these queries provide 
no information, or describe them as useless. 

For example, consider Deutsch's problem, in which / : {1,2} — )■ Z2 and the property 
to be determined is /(I) + /(2) [7]. If / is chosen uniformly at random, then the prior 
probabilities for the value of this sum are each 1/2. In this case, a single classical query is 
useless: the posterior probabilities for the value of the sum are unchanged after the oracle 
responds to either query. A single quantum query, on the other hand, is not useless: used 
properly, it identifies the value of the sum with probability 1 [8]. 

But this raises a natural question: Can quantum queries be useless? In this paper, we 
formalize the notion of uselessness and study problems for which the answer to this question 
is "yes". Our main result is a relation between the uselessness of classical and quantum 
queries: if 2k classical queries provide no relevant information about /, then k quantum 
queries provide no relevant information about /. 

The maximum number of queries that is useless will always be a lower bound for the query 
complexity; thus our analysis provides a new method for finding a lower bound for the 
quantum query complexity of any problem for which some number of classical queries is 
useless. 

A familiar problem to which our results apply is PARITY, a generalization of Deutsch's 
problem in which N e 'N is fixed, an arbitrary function / : {1, . . . ,N} — > Z2 is chosen 
uniformly at random, and the property to be determined is the modulo 2 sum of the 
values of /. This problem is an example of a black box oracle problem, in which the 
values /(I), . . . , f{N) form an unknown A^-bit string. Since A'^ — 1 classical queries reveal 
no information about the parity of this string, our result says that [{N — 1)/2J quantum 
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queries are also useless. This implies that the quantum query complexity must be at least 
Beals, et al. obtain this same lower bound using the polynomial method, and note 
that this bound is realized by a quantum algorithm that applies the solution to Deutsch's 
problem to the function values in pairs [9].* 

Parity is a simple example of a classical threshold secret sharing scheme. In the oracle 
problem framework, a classical {k, N) threshold secret sharing scheme [11] can be described 
as a set of functions / : {1, . . . , N} Y together with some property of / that can be 
determined by any k distinct classical queries, but about which no A; — 1 classical queries 
provide any information. So as a corollary of our main theorem, we find that any classical 
{k,N) threshold secret sharing scheme defines an oracle problem for which [(k — 1)/2J 
quantum queries are useless and which therefore has quantum query complexity at least 
\k/2]. 

Thus our results also give new quantum lower bounds, e.g., for POLYNOMIAL INTERPOLA- 
TION, a threshold secret sharing scheme introduced by Shamir [11]. Here the function / is 
a polynomial function of degree k over Zp, with k + 1 < p, and the problem is to determine 
/(O). The theory of polynomials easily implies that k + 1 classical queries suffice, but k 
queries yield no information. Applying our general results, this implies that [k/2\ quantum 
queries yield no information and thus at least [k/2\ +1 quantum queries are necessary. 

As this problem exemplifies, our formulation includes oracles that return more than a 
single bit in response to a query; it is thus more general than the one in which query 
complexities of Boolean functions are studied. Moreover, as indicated in the discussion 
of Deutsch's problem above, our formulation also includes a prior probability distribution 
over possible oracles. As such it includes the more commonly studied cases of total and 
partial functions as special cases: the former has a constant probability distribution over 
all functions, while the latter has a two-valued probability distribution that vanishes on 
disallowed functions. 

Furthermore, the methods we use to prove the main theorem are new. In the Appendix, 
we show how an existing method, the polynomial lower bound method [9], together with 
an observation of Buhrman, et al. [12], can be used to prove a special case of our theorem, 
namely the case in which we wish to compute a Boolean function, or partial Boolean 
function, of an A^-bit string. But these existing methods do not appear to suffice to prove 
our theorem in complete generality, i.e., in their current form they do not apply to the 
case in which the set Y has more than 2 elements, nor to the case in which we wish to 
compute more than just a Boolean classification of the allowed functions. 

2. The definition of uselessness 

Let X and Y be finite sets, and let C C Y^ be a subset of the set of all functions from X 
to Y. Boolean- valued functions, i.e., Y = Z2, are commonly studied — in computational 
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learning theory, for example, where C is called a concept class [5] . 

Suppose that the class C is partitioned into disjoint subclasses Cj, j G J. In the learning 
problems (C, {Cj | j G J},//) we are considering, an element / is chosen from C according 
to an arbitrary, but known, prior probability distribution fj,, and the task is to determine 
to which subclass Cj the function / belongs. Information about / is available only via an 
oracle that, given a query x E X , returns the value of f{x). To formalize the action of this 
oracle we begin by recalling some standard notation: 

Let 7^ = (g) C^, where Z is a finite set. The three tensor factors represent 
query, response, and auxiliary registers, respectively. We assume that Y is an abelian 
group, and that the quantum oracle Of acts on V, by addition of f{x) into the response 
register. (Everything in the following, however, can be carried out more generally in the 
permutation model introduced in [13].) Thus the action of the oracle Of : H ^ H is 
specified by the following permutation of the computational basis 

Of : \x,y,z) ^ \x,y + f{x),z). 

A general /c-query quantum learning algorithm can now be described as follows: An initial 
state is prepared with density matrix po £ ^ ® 'H^ • The algorithm passes this state to the 
oracle, which acts by Of, then the algorithm acts by some unitary operator Ui, independent 
of /; and the state is again passed to the oracle; etc. After the k^^ call to the oracle, the 
algorithm applies a last unitary operator f/fe to arrive in the final state 

Pf = UkOfU,_, . . . u,OfPoO}ul . . . ul_,o}ul (1) 

The last step is a POVM {Us} indexed by an arbitrary set S. Some map S ^ J, which is 
part of the algorithm (and independent of /), specifies the subset Cj to which we conclude / 
belongs. (Notice that the unitary operator Ukis unnecessary, since it could be incorporated 
into the measurement. It is notationally convenient, however, to include it.) 

Our main result concerns situations in which no information about the part Cj to which 
the function / belongs can be derived from some number of classical or quantum queries. 
We now make this notion precise. 

Definition (classical version). Let (C, {Cj \ j G J},/x) be a learning problem as described 
above. Then we say that k classical queries yield no information, or are useless, if for any 
xi, . . . ,Xk e X and yi, . . . ,yk eY, 

IJ,{f G Cj I f{xi) =yi,i = l,...,k) = //(/ G Cj), for aU j G J. 

That is, the probability of / being in any of the sets Cj is independent of the knowledge 
of any k function values. 

Definition (quantum version). Let (C, {Cj \ j G J}, //) be a learning problem as described 
above. Then we say that k quantum queries yield no information, or are useless, if for 
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any A;-query quantum algorithm with initial state po; unitary operations t/i, . . . , t/fc, and 
measurement {Hg}, 

//(/ G Cj I s) = n{f e Cj), for all s e S, j e J. 

That is, the probability of / being in Cj is independent of any measurement taken after k 
calls to the oracle. 



3. From classical to quantum uselessness 

Having made these definitions precise, we can state our main result: 

Theorem 1. Let (C, {C^ | j e J},//) be a learning problem. Suppose that 2k classical 
queries are useless. Then k quantum queries are useless. 

Example 1 (Parity) . As we described in the introduction. Theorem 1 applies to Parity: 
Let N e N, and let C be the set of all functions from {!,..., N} to Z2 with a uniform 
prior distribution. Partition C into Co and Ci according to the sum of the values of /. 
Then it is easy to see that N — 1 classical queries are useless. Thus, by Theorem 1, 
[(A^ — l)/2j quantum queries are also useless. Since PARITY can be solved with [A/2] 
quantum queries (using repeated XORs, i.e., solutions to Deutsch's problem), the quantum 
query complexity of PARITY for exact solution is exactly [A/2] , reproving a result of Farhi, 
et al. [10] and Beals, et al. [9]. Theorem 1 tells us a little more, namely that using 1 fewer 
query than this there is no quantum algorithm that succeeds with probability greater than 
1/2, a result that we show in the Appendix also follows from the analysis of unbounded 
error quantum query complexity of Boolean functions by Montanaro, et al. using more 
complicated machinery [14]. 

Example 2. Generalizing Deutsch's problem in a different direction than does PARITY, 
let C be the set of all functions from {1, 2, 3} to Z3 with a uniform prior distribution. Let 
C = Ceven UCodd, where a function / is defined to be even or odd depending on whether the 
size of the image of / is even or odd. Notice that the prior probability Pr(/ e Ceven) = 2/3, 
not 1/2. It is straightforward to check that two classical queries yields no information. 
Thus, by Theorem 1, a single quantum query is useless. (It turns out that two quantum 
queries suffice to solve this problem with probability 1. This result and generalizations 
will be the subject of a subsequent publication [15].) 

Example 3 (Polynomial Interpolation). Shamir's example of a threshold secret shar- 
ing scheme [11] provides a distinct family of examples. Let p be prime; let p — 1 > /c e M; 
and let 

k 

C = |/ : {1, . . . ,p - 1} ^ Zp I f{x) = J2 for ai G Zp}. 

Let n be the uniform distribution on C; this is equivalent to choosing each independently 
and uniformly at random in Zp. For j e Zp, let Cj = {f & C \ /(O) = j}. Since the unknown 
polynomial / has degree k, interpolation of the k values obtained by k classical queries. 



5 



On the uselessness of quantum queries 



Meyer & Pommersheim 



together with any value for /(O), identifies /. Since the value for /(O) is chosen uniformly 
at random, this means that any k classical queries alone give no information about Cj. So 
Theorem 1 tells us that [fc/2j quantum queries are useless. As with PARITY, this implies 
a lower bound for the quantum query complexity of POLYNOMIAL INTERPOLATION: 

Theorem 2. For Polynomial Interpolation, [k/2\ quantum queries are useless, 
and hence the quantum query complexity of POLYNOMIAL INTERPOLATION is at least 
lk/2\ + 1. 

4. Proof of the main theorem 

The proof of Theorem 1 rests upon the following lemma: 

Lemma. Let (C, {Cj | j e J}, //) be a learning problem. If 2k classical queries are useless, 
then for any j, 

f€Cj fee 
where pf is defined by equation (1). 

Proof. First note that any matrix B G l-L®l-0 has rows and columns indexed hy XxY xZ. 
Since Of is a permutation matrix, it is easy to express the entries of the matrix O^BOj in 
terms of the matrix B. If L = {x, y, z) and M = (u, v, w), then 

{OfBOj)L,M = BfLjM, (2) 

where for the triple L = (x, y, z), we define fL = {x,y + f{x), z). 

Let Pi denote the state after the i^^ query and after applying Ui, as in equation (1). Then 

Pi = U,OfPi_^0}u}, 
and from equation (2) and matrix multiplication, it follows that 

{Pi)L,M= Y {Ui)L,L'{pi-l)fL',fM'{U})M',M, (3) 
L',M' 

with the sum taken over all L', M' e X xY x Z. Now apply equation (3) iteratively: 
First, 

{Pi)l,M= ^ {U-i)L,Li{Po)fLi,fMi{Ul)Mi,M- 

Li,Mi 

Note that the quantity being summed depends only on the indices L, M, Li and Mi, and 
the two function values f{xi) and /(wi), where xi and ui are the first coordinates of Li 
and Ml, respectively. (It also depends on po and the unitary matrix Uq, but these are 
fixed.) 
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Second, 

{P2)l,M = ^ {U2)L,L2{Ui)fL2,LiiPo)fLiJMi{Ul)Mi,fM2{U2)M2,M- 

Li,Mi,L2,M2 

Here the quantity being summed depends on the indices L, M, Li, L2, Mi and M2, and 
the four function values f{xi), f{x2), f{ui) and J{u2). 

Continuing in this manner, the final density matrix after k queries, pk — Pf, is given by 

Pf = Yl Qi{fM^ • • • ' fi^k), f{ui), f{uk)), 
I 

where the sum is taken over all tuples / = (Li, . . . , L/,, Mi, . . . , M^) E {X x Y x Z)^^, 
and Qi{f{xi), . . . , f{xk), f{ui), . . . , f{uk)) E'H®'W is o. matrix that depends only on the 
index / and the 2k function values shown. 

Thus, for any j E J, 

J2 Kf)pf = E E MQi{f{^i). fM, fM, fiuk)). (4) 

Regrouping, the right hand side of equation (4) becomes 

Kf ^ /(^») =yhf{'^i) = Vi,ie {l,...,k})Qi{yi,...,yk,vi,...,Vk), 

with the inner sum taken over all 2/1, . . . , y/j, f 1, . . . , e Y . But by the hypothesis that 
2k classical queries yield no information, 

e Cj and f{xi) = Vi, f{ui) = w^, i G {1, . . . , /c}) 

= n{Cj)n{f{xi) = Vi, f{ui) = Vi, z e {1, . . . , k}). 

Thus equation (4) becomes 

= K^j) P{f(^i) =yiJi'^i) = Viii^ {'i-, ■ ■ ■ ,k})Qi(yi, . . . ,yk,vi, . . . ,Vk). 

i,{yi},{vi} 

(5) 

Summing equation (5) over all j gives 
f^C i,{yi},{vi} 
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whence the the lemma follows. | 

Proof of Theorem 1. The statement of the theorem is that the probability of / being in Cj 
does not change if s is observed after k queries, i.e., for any j E J and s & S, we need to 
show that 

To prove this, calculate the probability of / having been the chosen function conditioned 
on having observed s, using Bayes' Theorem: 



Thus, 



^((E/.c..M/)p/)n.) 

2^ ^(/ I s) = — Y ^ f . (6) 



feCj 



Applying the Lemma, the quotient on the right hand side of equation (6) reduces to jJ-iCj), 
establishing the theorem. | 



5. Conclusion 

As we noted in the introduction. Theorem 1 implies a lower bound on the quantum query 
complexity of certain learning problems: 

Theorem 3. Let iC,{Cj \ j G be a learning problem. Suppose that 2k classical 

queries are useless. Then the quantum query complexity of the problem is at least k + 1. 

The uselessness of some mimber of quantum queries in learning problems with two sub- 
classes also has a consequence for amplified impatient learning [16]: If in addition to the 
membership oracle (the oracle that returns function values), we have access to an equiva- 
lence oracle (an oracle that answers the questions of the form "Is / e Cj?"), a commonly 
studied situation in computational learning theory [17], we can implement amplitude am- 
plification [6,18,19,20,21] after any number of quantum queries. If k quantum queries to 
the membership oracle are useless, however, amplitude amplification works exactly as well 
if it is implemented immediately, i.e., after no quantum queries, as when it is implemented 
after k or fewer quantum queries. 

These results encourage further investigation of the quantum query complexity of, and 
quantum algorithms for, learning problems in which some number of classical queries are 
useless. These include problems in the families exemplified by Examples 2 and 3. We will 
address some of these questions in a forthcoming paper [15]. 
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Appendix 

In this appendix, we focus on the special case in which we are trying to compute a Boolean 
function, or partial Boolean function, of AT-bit strings. That is, we assume that (a) the 
concept class C consists of Boolean-valued functions, i.e., the codomain is y = {0, 1}; and 
(b) the partition of C has exactly two parts C = CqUCi. We show that the polynomial 
method of [9], together with an observation of [12], can be used to prove Theorem 1 for 
this special case. Similar ideas appear in Section 3 of [14]. As noted in the Introduction, 
it seems that these ideas cannot be used to prove Theorem 1, which is not limited by 
restrictions (a) or (b). 

We base our proof of this special case of Theorem 1 on the following result, which gives a 
general relation between A;-query quantum algorithms and 2A;-query classical algorithms. 

Theorem 4. Suppose (C, {Cj \ j G J}, Ij) is a learning problem, as described above, such 
that Y — {0, 1} and J — {0, 1}. Given a k-query quantum algorithm, for each N-bit 
string f of function values computed by the oracle, denote by p{f) the probability that the 
quantum algorithm outputs 0. Then there exists a positive real number T and a 2k-query 
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{randomized) classical algorithm whose output probability for f is given by 

Pclassical(/) = ^{p{f) ~ \) + \- 

That is, for each f, the bias of the classical algorithm away from | is times the bias 
of the quantum algorithm away from |. 

Note that this theorem does not require the existence of a prior distribution on C. 

Proof. For convenience, we will assume that X = {1, . . . , N}^ and we will identify with 
A^-bit strings / = (/(I), . . ., /(A^)). C is then a subset of A^-bit strings. Suppose we are 
given any /c-query quantum algorithm. Then the arguments of [9] show that there exists 
a squarefree polynomial p{f) of degree at most 2k with real coefficients such that for any 
f & C evaluated by the oracle, p{f) is the probability that the quantum algorithm outputs 
0. 

We now change variables, so as to identify functions from {0,1}-^^{0,1} with functions 
{—1,1}-'^ — > {—1,1}. Specifically, we introduce the polynomial 

q{wi,...,WN) =2p[ — - — -1. 



Then q{w) is a squarefree polynomial of degree at most 2k with real coefficients, and has 
the property that for any w e {—1, 1}^, the probability that the corresponding / e {0, 1}^ 
leads to an output of is equal to p{x) = (l + q{w)) /2. Then we have 

s 

where the sum is over all subsets 5 of {1, ... , N} of size less than or equal to 2k, and ws 
denotes the product of Wi with i e S. Let T = 

We now introduce a classical algorithm, following the observation of Buhrman, et al. [12]. 
First note that the absolute value of g/T defines a probability distribution on the subsets 
S of {1,...,A/"} of size less than or equal to 2k. Begin by picking a random subset S 
according to this distribution. By invoking the classical oracle at most 2k times, compute 
Ws- Then according to whether sign(g(5'))i(;5 is 1 or —1, output or 1, respectively. 

We claim that for any / e C C {0, 1}^, the probability that this classical algorithm 
outputs equals Pciassicai(/) = {p{f) ~ 1)/^ + |- To see this, note that the probability of 
outputting is 

s 

where ^5 = 1 if sigri{q{S))w g = 1, and otherwise. This simplifies to 
^\qiS)\f sign{q{S))ws + l \ A T + q{w) If 1x1 

s s 
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as desired. 



I 



As a consequence we have the foUowing special case of Theorem 1: 

Corollary 5. For any learning problem (C, {Q | j G J}, A*) as described above, with 
Y = {0, 1} and J = {0, 1}, if 2k classical queries are useless, then k quantum queries are 
useless. 

Proof. Suppose that 2k classical queries are useless. Given any /c-query quantum algorithm, 
consider the corresponding 2/c-query classical algorithm given by Theorem 4. Since this 
algorithm is useless, we have 




It follows that 




f€Co 



In other words, the quantum algorithm is also useless. 
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